Important warning to Quidco users

epm-84

Following on from the Heartbeat Bug news story on many news sites: http://www.bbc.co.uk/news/technology-26954540

Quidco is one site that uses Open SSL so is particularly vulnerable, especially as some people will have bank account details stored in their accounts. Rival Topcashback is not as risk.

A list of sites which a techie has run checks on is here: https://github.com/musalbas/heartbleed-masstest/blob/master/top10000.txt?_ga=1.136400181.406593285.1397057910 The word 'vulnerable' next to the site means it's at risk.

Swafe

hmmm, i assume most BIG sites are OK? or have been patched quickly? or do we need to change all our passwords for everywhere? this is quite big news surprised there are no more replies on this

quidco_Company_Representative

Hi guys,

We completely understand your concern with this, but I'd like to reassure you all that the Quidco site was patched yesterday and is not at risk to Heartbleed.

If you are at all worried, you can check for yourselves via the link below:

http://filippo.io/Heartbleed/#quidco.com

I hope this reassures you all.

Many thanks,

Rosie
Quidco Rep

Browntoa

just checked

moneysavingexpert.com... not vulnerable.

PlutoinCapricorn

Swafe wrote: »

hmmm, i assume most BIG sites are OK? or have been patched quickly? or do we need to change all our passwords for everywhere? this is quite big news surprised there are no more replies on this

I was worried about this, but the sites I have been using are not vulnerable.

I have never even heard of most of the vulnerable sites, and suppose that they might be dangerous only for people who have signed up and given bank or credit card details.

Doc_N

quidco_Company_Representative wrote: »

Hi guys,

We completely understand your concern with this, but I'd like to reassure you all that the Quidco site was patched yesterday and is not at risk to Heartbleed.

If you are at all worried, you can check for yourselves via the link below:

http://filippo.io/Heartbleed/#quidco.com

I hope this reassures you all.

Many thanks,

Rosie
Quidco Rep

Thanks, Rosie, but it's not really that reassuring. As you say, the site has now been patched, but the fact that it's been patched suggests that there must have been a problem that needed patching.

Which means, of course, that vital information (the password, and through it all the other personal information held - name, address, bank account details etc) could already have been hacked.

This is a serious problem, which I think you're underplaying.